Region : Russia

Model : TL-R480T+

Hardware Version : TL-R480T+ v5.1

Firmware Version : 5.1.2 Build 20130116 Rel.45581s

ISP : none

Firmware Version: 5.1.2 Build 20130116 Rel.45581s
Hardware Version: TL-R480T+ v5.1

I wanted to do build this scenario:

1.) One network 192.168.1.0/255.255.255.0
2.) 2 virtual servers (see attached image)
3.) 6 IPs should have internet access (I have created group for them, see attached screen), while all other IPs should not have access network behind routers LAN interface.

steps 1.) and 2.) - works fine, - all users has internet access, and I can make inbound connection to my route via ssh or openvpn

the problem starts when I try to restrict access to the internet for clients

As You can see from access list to block internet access I uses HTTP and HTTPS services, but it allows client to connect to the internet by any external proxies or using Skype or similar programs
If I change rules 3 and/or 4 to one rule - block "All services" then VERY strange thing happen:

Client are successfully blocked but my incoming connections (configured in virtual servers) are stop working....

I tried all could images but when block "All services" are enabled none of the "virtual servers" connections are working

192.168.1.12 - my local server
192.168.1.254 - router's LAN interface


Any ideas what I do wrong? I tend to thinks it some sort of firmware problem...